How long and how can my contact person be reached?

During your acute ransomware incident, our team is available 24/7 in several shifts. Your personal contact is usually available from 8:00 a.m. to 6:00 p.m. in the German time zone (CET +2) and, if necessary, beyond. We understand that this extraordinary situation requires special attention and are therefore at your side with full commitment. Since…

How many employees are working on my case?

Your ransomware incident will be accompanied by a personal ransomware specialist. He is always at your side to provide advice as well as technical support. In addition, he is supported by a team of other experts, as well as a dedicated team, which handles the ransom negotiation and the processing of the ransom payment. This…

How exactly are the working days billed?

Billing takes place for each working day commenced. If you instruct us at 3:30 CET p.m., a full working day will be charged. Ransomware incidents that we have to support immediately require significantly more effort, especially at the beginning, and we have to provide staff immediately. The minimum acceptance is always two days anyway, as…

Up to what ransom amount do you expose the payments?

Normally we will make advance payments for you for ransom payments of up to EUR 25,000. However, this requires a corresponding positive creditworthiness, which we have checked by external creditworthiness companies before our offer. If the requested ransom exceeds EUR 25,000, or the positive creditworthiness check fails, we will send you a proforma invoice in…

Can you decrypt my Avaddon ransomware files?

To our knowledge, there are presently no working free Avaddon decrypt tools for Avaddon ransomware. You can check for free, publicly available decryption tools here. In most cases, the only way to obtain a working Avaddon decrypt tool is through negotiation with the attackers. Depending on the history of the gang that is behind the…

Can you Decrypt my Lockbit Ransomware Files?

Lockbit is a relatively new strain of ransomware, and to the best of our knowledge, there are no existing Lockbit decrypt tools. You can check for free, publicly available decryption tools here. In most cases, the only way to obtain a working Lockbit decrypt tool is through negotiation with the attackers. Depending on the history…

How Does RYUK Ransomware Encrypt Files?

RYUK ransomware, notoriously known for attacking corporations and large businesses, uses military grade encryption standards of AES 256 bit and RAS 1024 bit. Without the decryption key, it is impossible to decrypt large amounts of data. To get back up online in the shortest amount of time, the only resort left with victims is to…

How Do I Remove The GandCrab Ransomware Virus?

GandCrab ransomware creates multiple Windows registry entries, creates hidden executable files and sometimes opens a backdoor in firewalls for further access. There are multiple steps necessary, including the cleaning up of the Windows registry, scanning for malware and the manual cleanup of the GandCrab ransomware. Depending on the system environment, it is sometimes safer and…